industry · quantum risk
Bitcoin Custody and Quantum Risk
Verdict
Custody design multiplies or reduces Bitcoin’s quantum exposure. Shared hot wallets, static deposit addresses, and unclear key inventories are organizational failures on top of classical cryptography.
Overview
Most BTC is not held as a single paper key under a mattress. It sits in exchange hot wallets, qualified custodian cold storage, corporate treasuries, and consumer software wallets. Quantum risk inherits all the operational realities of those systems.
A CRQC that can break exposed public keys prefers concentration: busy hot wallets and reused addresses are efficient targets. Self-custody users face different tradeoffs—backup hygiene, inheritance, and phishing remain classical threats that still dominate daily loss statistics.
This page is for security and risk readers evaluating custody posture. Pair it with the BTC asset dossier and address-reuse spoke for technical mechanisms.
What breaks
- Deposit address reuse at scale
- Single-signature hot keys authorizing large withdrawals
- No inventory of which UTXOs already exposed public keys
Mitigations
- HD receive addresses; minimize reuse by policy
- Multisig / MPC with documented algorithms and upgrade paths
- Quantum readiness questions in vendor due diligence
- Incident playbooks that do not rely on “we will move later” without key inventory
FAQ
What should I ask a custodian?
Ask how deposit addresses are generated, whether reuse is possible, how keys are ceremony-controlled, whether they track UTXOs with exposed pubkeys, and whether they have a published crypto-agility or PQC research stance.
Is multisig quantum-proof?
Multisig improves operational resilience but typically still uses classical signatures per key. It is not a substitute for post-quantum algorithms.
Key concepts (technical dictionary)
Terms used on this page — open a definition: